MDR providers in the United States
60 of the 100 MDR providers we list are based in the United States. 6 are public, 11 are owned by another company and 43 are private. The oldest, REJIS, was founded in 1974. By revenue from annual reports, the largest company here is Microsoft ($331.8bn in FY2026).
Companies focused on managed detection and response in the United States
15 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
LevelBlue (formerly Trustwave) Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise. | Chicago, United States | 1995 | 500+ staff | Private | |
DeepSeas (formerly RedTeam Security) RedTeam Security is now part of DeepSeas, which offers penetration testing, red teaming and physical testing as its offensive security practice. | Atlanta, United States | 2012 | 11-50 staff | Private | |
Arctic Wolf Arctic Wolf provides managed security operations, threat detection and incident response services to organisations. | Eden Prairie, United States | 2012 | Private | ||
A Armor Provides cloud security, compliance and managed detection and response services to regulated industries. | Plano, United States | 2009 | Private | ||
Binary Defense Binary Defense provides managed detection and response services and an AI-powered security platform. | Stow, United States | Private | |||
Critical Start Critical Start provides managed detection and response services to monitor, investigate, and resolve security threats for organisations. | Plano, United States | 2012 | Owned by Vista Equity Partners | ||
Cyderes Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management. | Kansas City, United States | Private | |||
Expel Expel provides managed detection and response security services using AI and human analysts. | Herndon, United States | 2016 | Private | ||
Foresite Cybersecurity Foresite provides managed detection and response services using agentic AI for security operations. | Overland Park, United States | Private | |||
Huntress Huntress provides managed cybersecurity services including endpoint detection, identity threat detection, and security awareness training. | Columbia, United States | Private | |||
Kaseya Kaseya provides software for IT management, security and automation to IT teams and managed service providers. | Miami, United States | 2000 | Private | ||
Ontinue Ontinue provides managed detection and response services for Microsoft security customers. | Redwood City, United States | Owned by Quorum Cyber | |||
Quzara Quzara provides FedRAMP compliance advisory and managed detection and response services. | Vienna, United States | Private | |||
UnderDefense UnderDefense provides managed detection and response, incident response, and compliance automation services. | New York, United States | 2017 | Private | ||
R Red Canary Zscaler provides cloud-based security, network and transformation services for enterprises. | Santa Clara, United States | 2014 | Part of Zscaler |
Also active in managed detection and response
45 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Microsoft Microsoft sells software, cloud services, hardware, and gaming products. | Redmond, United States | 1975 | 228,000 staff | Public, MSFT | $331.8bn (FY2026) |
Palo Alto Networks Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats. | Santa Clara, United States | 2005 | 13,900 staff | Public, PANW | $11.5bn (FY2026) |
CrowdStrike CrowdStrike provides AI-native cybersecurity solutions to stop breaches. | Austin, United States | 2011 | 7,925 staff | Public, CRWD | $4.8bn (FY2026) |
SentinelOne SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection. | Mountain View, United States | 2013 | Public, S | $1.0bn (FY2026) | |
Rapid7 Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management. | Boston, United States | 2000 | 500+ staff | Public, RPD | $859.8m (FY2025) |
Varonis Varonis provides data security software that protects data across cloud, SaaS and on-premises environments. | Miami, United States | 2005 | Public, VRNS | $623.5m (FY2025) | |
ThreatLocker Provides Zero Trust cybersecurity software controlling application execution, network access and privileged access for organisations. | Orlando, United States | 2017 | 700 staff | Private | |
Sophos Sophos provides cybersecurity products and managed detection and response services to organisations worldwide. | Atlanta, United States | 1999 | 500+ staff | Owned by Thoma Bravo | |
R Redpoint Cybersecurity US-wide pen testing firm serving major cities including Atlanta, Dallas, Denver, Houston, and Miami with security assessments. | Denver, United States | 2015 | 11-50 staff | Private | |
7AI 7AI provides AI agents that automate security operations centre tasks for enterprises. | Boston, United States | 2024 | Private | ||
Alcott Enterprises Managed IT Services & Cybersecurity Alcott Enterprises is a managed IT service provider and cybersecurity company based in Los Angeles. | Torrance, United States | 2014 | Private | ||
Artemis Security Artemis Security provides an AI-native security operations platform that detects, investigates and responds to cyber attacks. | New York, United States | Private | |||
Barracuda Networks Barracuda Networks provides cybersecurity solutions for email, networks, applications, and data. | Campbell, United States | 2003 | Owned by KKR | ||
Blumira Blumira provides a security operations platform for IT teams to detect and respond to threats. | Ann Arbor, United States | Private | |||
Boston Managed IT Boston Managed IT is a managed service provider based in Waltham, Massachusetts, founded in 2017. | Waltham, United States | 2015 | Private | ||
Cofense Cofense provides phishing detection and response services using AI and human validation. | Arlington, United States | Private | |||
Comodo Group Comodo Group sells cybersecurity products and services to businesses and organisations. | Clifton, United States | 1998 | Private | ||
CyberSheath CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards. | Reston, United States | 2012 | Private | ||
Datto Datto provides backup and disaster recovery, endpoint management, professional services automation, networking and cybersecurity solutions. | Norwalk, United States | 2007 | Part of Kaseya | ||
Dragos Dragos provides cybersecurity for industrial control systems and operational technology environments. | Houston, United States | 2016 | Part of Accenture | ||
Dropzone AI Dropzone AI builds AI agents that investigate security alerts and hunt threats for security teams. | Seattle, United States | 2022 | Private | ||
Druva Druva provides a fully managed SaaS platform for data backup, recovery, and cyber resilience. | Sunnyvale, United States | 2008 | Private | ||
Exaforce Exaforce provides an agentic AI platform for security operations, detection, triage, investigation and response. | San Jose, United States | 2023 | Private | ||
Fleet Defender Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC. | Omaha, United States | Private | |||
Globalgig Globalgig provides managed security and network services to enterprises across multiple countries. | San Antonio, United States | Private | |||
Intezer Intezer provides an AI-powered security operations center that investigates all alerts at forensic depth. | New York, United States | 2015 | Private | ||
Lorikeet Security Lorikeet Security provides penetration testing, incident response, and security leadership services. | Kissimmee, United States | 2021 | Private | ||
MonsterCloud MonsterCloud provides managed cloud, IT and cyber security services, including ransomware recovery, to businesses across the United States. | Hollywood, United States | Private | |||
Netrio Netrio provides managed IT, cybersecurity, cloud, and connectivity services to mid-market enterprises. | McKinney, United States | Private | |||
NINJIO NINJIO provides cybersecurity awareness training and human risk management through personalised coaching and phishing simulations. | Westlake Village, United States | Private | |||
nuHarbor nuHarbor provides cybersecurity services and managed security operations to organisations across government, healthcare, finance and enterprise. | United States | 2013 | Private | ||
REJIS REJIS provides technology solutions for public safety and government agencies. | St. Louis, United States | 1974 | Private | ||
ReliaQuest ReliaQuest provides an AI security operations platform for enterprises to detect and respond to threats. | Tampa, United States | Private | |||
SCYTHE SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments. | Columbia, United States | 2018 | Private | ||
Securonix Securonix provides a cloud-native platform for security operations, combining SIEM, UEBA, SOAR and threat intelligence. | San Mateo, United States | 2008 | Private | ||
SonicWall SonicWall provides unified cybersecurity for SMBs, MSPs, and IT teams. | Milpitas, United States | 1991 | Owned by Francisco Partners and Elliott Investment Management | ||
STACK Cybersecurity Provides managed IT services, cybersecurity, compliance support and AI adoption guidance to businesses. | Livonia, United States | Owned by IT Solutions | |||
Tranzhalo Georgia start-up whose TranzSecure service flags cyber attacks, unknown devices and cargo theft across trucking fleets. | Alpharetta, United States | Private | |||
Vectra AI Vectra AI provides AI-native security and observability to detect and respond to cyber threats. | San Jose, United States | 2011 | Private | ||
WatchGuard WatchGuard provides unified cybersecurity solutions for networks, endpoints, identities, and cloud environments. | Seattle, United States | 1996 | Owned by Vector Capital | ||
XTIUM Provides managed IT services including security, cloud desktops, networks and AI deployment support. | Oldsmar, United States | Private | |||
Athena Agentic Athena Agentic provides a unified cyber operations platform that automates detection, response, and hardening. | Dallas, United States | Private | |||
Cantina Cantina provides an agentic security platform that uses autonomous AI agents to detect, respond to, and fix security issues. | Miami, United States | Private | |||
Kyndryl Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider. | New York, United States | Private | |||
M Mandiant Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud. | United States | 2004 | Part of Google |
More MDR providers
All 100 MDR providersEvery cybersecurity company in the United States · See every category